explicitly set and use Go toolchain version specified in go.mod

Author: capnspacehook

.github/constants.env

@@ -20,16 +20,10 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
       - name: Install Go
         uses: actions/setup-go@v4
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
+          go-version-file: go.mod
 
       # Install any tools 'go generate' uses here
 

.github/workflows/check-generated.yml

@@ -49,6 +49,12 @@ jobs:
         with:
           languages: ${{ matrix.language }}
 
+      # TODO: remove once https://github.com/github/codeql/issues/13992 is fixed
+      - name: Install Go
+        uses: actions/setup-go@v4
+        with:
+          go-version-file: go.mod
+
       - name: Autobuild
         uses: github/codeql-action/autobuild@v2
 

.github/workflows/codeql.yml

@@ -15,16 +15,10 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
       - name: Install Go
         uses: actions/setup-go@v4
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Lint workflow files
         run: |

.github/workflows/lint-actions.yml

@@ -18,20 +18,15 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
       - name: Install Go
+        id: install-go
         uses: actions/setup-go@v4
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Ensure go.mod was tidied
         run: |
-          go mod tidy -compat ${{ env.GO_VERSION }}
+          go mod tidy -compat ${{ steps.install-go.outputs.go-version }}
           STATUS=$(git status --porcelain go.mod go.sum)
           if [ -n "$STATUS" ]; then
             echo "Running 'go mod tidy' modified go.mod and/or go.sum"
@@ -46,16 +41,10 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
       - name: Install Go
         uses: actions/setup-go@v4
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Lint with staticcheck
         uses: dominikh/[email protected]
@@ -71,16 +60,10 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
       - name: Install Go
         uses: actions/setup-go@v4
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Lint with golangci-lint
         uses: golangci/[email protected]

.github/workflows/lint-go.yml

@@ -21,19 +21,13 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
       - name: Checkout tags
         run: git fetch --force --tags
 
       - name: Install Go
         uses: actions/setup-go@v4
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Install cosign
         uses: sigstore/cosign-installer@main

.github/workflows/release.yml

@@ -18,16 +18,10 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
       - name: Install Go
         uses: actions/setup-go@v4
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Ensure main package builds
         run: |
@@ -45,16 +39,10 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
       - name: Install Go
         uses: actions/setup-go@v4
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Fuzz code for 10 minutes
         run: |

.github/workflows/test.yml

@@ -17,21 +17,6 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Export constant environmental variables
-        uses: cardinalby/export-env-action@v2
-        with:
-          envFile: .github/constants.env
-
-      - name: Install Go
-        uses: actions/setup-go@v4
+      - uses: golang/govulncheck-action@v1
         with:
-          go-version: ${{ env.GO_VERSION }}.x
-          check-latest: true
-
-      - name: Scan for known vulnerable dependencies
-        run: |
-          go install golang.org/x/vuln/cmd/govulncheck@latest
-          govulncheck ./...
+          go-version-file: go.mod

.github/workflows/vuln.yml

@@ -1,6 +1,8 @@
 module github.com/capnspacehook/go-project-template
 
-go 1.19
+go 1.21.0
+
+toolchain go1.21.1
 
 require go.uber.org/zap v1.25.0